
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9C95/98E731C847A011F1B09F60C1A2833773/CqAPpYxAjQbIlNjrrzidTFAQVEM.mft
File: CqAPpYxAjQbIlNjrrzidTFAQVEM.mft (raw, json)
Hash identifier: evgrQtbwUlgdvMxPaVrDSbk7ddZJxu7FCb7cwQX8zEk=
Subject key identifier: 27:2C:AD:A5:8D:5F:A3:71:35:0A:93:F8:13:12:26:2F:7B:E2:C3:68
Authority key identifier: 0A:A0:0F:A5:8C:40:8D:06:C8:94:D8:EB:AF:38:9D:4C:50:10:54:43
Certificate issuer: /CN=A91D9C95/serialNumber=0AA00FA58C408D06C894D8EBAF389D4C50105443
Certificate serial: 20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqAPpYxAjQbIlNjrrzidTFAQVEM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9C95/98E731C847A011F1B09F60C1A2833773/CqAPpYxAjQbIlNjrrzidTFAQVEM.mft
Manifest number: 20
Signing time: Fri 03 Jul 2026 09:47:31 +0000
Manifest this update: Fri 03 Jul 2026 09:47:31 +0000
Manifest next update: Fri 10 Jul 2026 09:47:31 +0000
Files and hashes: 1: CqAPpYxAjQbIlNjrrzidTFAQVEM.crl (hash: 87hC/8JbbuPN7s34X/h9+7jhnXe5U1hP2UaVNerj5Vk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9C95/98E731C847A011F1B09F60C1A2833773/CqAPpYxAjQbIlNjrrzidTFAQVEM.crl
rsync://rpki.apnic.net/member_repository/A91D9C95/98E731C847A011F1B09F60C1A2833773/CqAPpYxAjQbIlNjrrzidTFAQVEM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqAPpYxAjQbIlNjrrzidTFAQVEM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 10 Jul 2026 09:47:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9C95, serialNumber=0AA00FA58C408D06C894D8EBAF389D4C50105443
Validity
Not Before: Jul 3 09:47:31 2026 GMT
Not After : Jul 10 09:47:31 2026 GMT
Subject: CN=6a478533-a2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:de:0a:74:9d:7d:f9:3f:6c:14:88:c4:43:73:
33:be:4c:33:0c:0a:b1:ce:24:9e:15:0e:fb:1b:61:
bb:70:ca:6e:ba:58:78:b4:ba:60:17:db:d6:22:24:
c8:7a:02:ee:f3:ff:c8:83:ee:5d:1b:39:70:41:73:
18:5b:4f:09:33:f7:40:35:2f:c5:f5:ab:85:15:78:
a2:f3:a8:a9:17:9a:fc:1a:b9:c2:02:87:46:aa:35:
80:35:bf:b1:a4:b7:51:bc:85:ea:dd:07:62:39:d3:
8c:cc:ba:66:c3:20:72:08:03:62:86:43:cf:ea:22:
f3:ce:03:1a:24:f8:f6:c0:19:01:5e:8b:1c:82:d9:
bc:d7:3f:04:9a:97:98:f7:9a:69:aa:9b:7e:ab:cc:
5c:3c:78:36:80:60:1b:5a:7f:db:8e:2b:0c:30:b5:
81:a3:7a:c1:9c:1b:b9:ea:57:8a:f8:d8:95:f1:f0:
d0:da:0a:5a:28:c2:05:ae:ef:7d:3e:30:2a:7a:b5:
de:09:ec:af:55:e1:4c:dc:67:1a:a3:a4:5d:00:44:
5d:db:c0:87:eb:3d:f4:10:47:18:b2:6e:de:66:36:
df:6a:22:05:af:ff:e6:21:eb:ff:fa:b7:ee:7c:c8:
e2:cb:58:82:a8:de:e0:d6:46:b3:c6:08:45:81:5b:
68:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2C:AD:A5:8D:5F:A3:71:35:0A:93:F8:13:12:26:2F:7B:E2:C3:68
X509v3 Authority Key Identifier:
keyid:0A:A0:0F:A5:8C:40:8D:06:C8:94:D8:EB:AF:38:9D:4C:50:10:54:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9C95/98E731C847A011F1B09F60C1A2833773/CqAPpYxAjQbIlNjrrzidTFAQVEM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqAPpYxAjQbIlNjrrzidTFAQVEM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9C95/98E731C847A011F1B09F60C1A2833773/CqAPpYxAjQbIlNjrrzidTFAQVEM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ed:b3:29:12:e7:1e:ae:b3:0f:64:dd:e3:98:e3:29:a8:6a:
f7:c6:b0:b2:a8:84:53:43:13:ae:1d:92:9f:f9:b3:4b:c9:50:
05:4d:9c:f6:98:40:b8:58:c1:b1:3b:69:7a:ea:97:7f:97:7e:
fe:8b:c9:7a:f7:d5:76:e4:50:51:f8:fb:73:94:a3:9b:6e:29:
76:19:7a:d1:49:56:19:01:5f:3c:13:29:db:55:08:9f:40:d8:
6a:dd:d5:7a:81:97:58:97:24:e1:03:c4:e7:67:63:46:ea:03:
06:85:b6:93:4f:33:0f:9e:2b:a2:d5:fd:8b:8c:7a:d2:75:61:
29:66:3d:ba:3a:ab:93:44:53:9e:4c:b0:1c:6c:6b:6f:e3:0e:
ea:d4:2b:63:72:67:4b:18:7a:3c:19:74:8f:b1:01:fa:fb:39:
28:fc:b1:15:6d:0c:ea:1b:63:b0:b0:d6:ad:4c:a2:99:7d:d0:
fd:eb:16:29:6d:c9:9b:3e:c7:25:b8:4e:be:5f:a6:f7:56:e4:
36:87:e9:8b:51:ad:83:38:31:32:2a:bb:e3:22:dd:e7:79:96:
61:08:c8:4a:23:18:c4:02:a9:fc:f3:65:c0:72:88:16:f5:cb:
38:8a:1c:fe:14:6d:88:dd:45:64:36:21:f5:fa:ad:b0:65:f8:
3a:ef:f2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:35:45 2026 by rpki-client